Nontorsion Points of Low Height on Elliptic Curves over Quadratic Fields 
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We give examples of points with particularly low height on elliptic curves over quadratic fields, recovered by a 
search over elliptic divisibility sequences. The smallest example identified satisfies dh(P) = 0.0077127 . . .: improv- 
ing on the previous smallest for curves over quadratic fields of dh(P) = 0.0194426 . . . given in |Everest and Ward 00] ; 
and comparable with some of the examples of smallest height on curves over Q tabulated in lElkies 02] , 



Abstract 



1 Introduction 

The elliptic Lehmer problem is concerned with lower bounds on the height of points on elliptic curves; more precisely, 
if E is an elliptic curve over K a number field of degree d, then it is conjectured that for any nontorsion point 
i ** H i ' P G E(K) the canonical height h(P) is bounded below by c/d for c > a uniform constant. Elkies maintains 
a website [Elkies 02; which includes a table of the smallest known examples over Q: there are 54 examples with 
T ~ < ; h < 0.01; the best being the point (0, 0) of height 0.0044571 . . . on y 2 + 253xy + 119700m = x 3 + 5320a; 2 . 

[■ — , 1 No analogous tables for general number fields exist, but [Everest and Ward 00] contains the examples (3— 12w, — 108w 2 ) 
t^J- . of height 0.01032 ... on y 2 = a; 3 — 243a; + 10368w + 3726, where w is a non-trivial cube root of unity; and 
(3 - 9u, 108 - 108m) of height 0.00971 . . . on y 2 = x 3 + (1215u - 2214)x + 40878 - 23328m, where u = (1 + VE)/2. The 

. elliptic Lehmer problem implies a lower bound on the growth rate of elliptic divisibility sequences, and Everest's and 
i— H Ward's examples were recovered from such sequences with arithmetically simple initial terms, which they suggest as 

. a promising search space. 



This note gives the results of such a search for points of small height, for elliptic curves over some quadratic fields. 
Two examples with height less than 0.005 (and thus competitive with the entries in Elkies' tables) were found: the 
point (497^+860, 7523^3+13029) of height 0.0038563 ... on y 2 + V3xy+y = x 3 ~V3x 2 - (1544879^3+2675806)2; + 



1407381720\/3 + 2437656645; and (2u - 4, 3a; + 6) of height 0.0047223 . . . on y 2 + xy = a; 3 - 2cox 2 - (u + 2)x + 5w + 2, 
where ui = | + In all, 30 examples with h < 0.01 are given in Table Q] in Section 4; these are preceeded by 

a summary of the relevant theory in Section 2, and a description of techniques for efficient implementation of the 
search in Section 3. 

2 Elliptic Divisibility Sequences and Elliptic Curves 

An elliptic divisibility sequence is a sequence of integers u n ■ uq, u\ 1 M2, . . . , Mi, . . . which is a particular solution of 

W m + n W m -n = W m+ lW m _iwl - W n+1 W n ^ 1 W 2 n (1) 
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such that u n divides u m whenever n divides m. A proper elliptic divisibility sequence additionally satisfies 

m = 0, ut = 1, u 2 u 3 ^ 0. (2) 

By [Ward 48] , these are the only elliptic divisibility sequences of arithmetic interest, and a tuple 1*2,1*3, U4 defines a 
proper elliptic divisibility sequence if and only if they are integral with U2IU4. 

Let if be a number field of degree d with ring of integers Ok- For 01, 0L2, 03, 04, as € Ok an elliptic curve E over if 
is given by the generalized Weierstrass equation 

y 2 + a\xy + a%y = x 3 + a,2X 2 + a 4 x + a$. (3) 

Defining quantities 62, &4, &6, bg, as 

b 2 = a\ + Aa 2l 
64 = 2a4 + 0103, 
6 6 = al + Aa 6l 

b s = afa 6 + 4a 2 a 6 - aia 3 a 4 + a 2 a\ - af, 

we obtain the discriminant A of E, 

A = -b 2 b 8 ~8b 3 -27b 2 + 9b 2 b 4 b 6 eO K , (4) 

and may construct polynomials ip n € Ok[x, y] by 

^0 = 0, 

1P1 = 1, 

V->2 = 2y + aia; + a3, 

V>3 = 3x 4 + b 2 x 3 + 3b 4 x 2 + 3b$x + b$, 

V>4 = ^2 (2a; 6 + & 2 £ 5 + 56 4 a; 4 + 106 6 x 3 + 106 8 x 2 + (b 2 b 8 - b 4 b 6 )x + b 4 b s - &e) 
and then inductively for n > 3 by 

The zeros of ip n are the x-coordinates of the points on E with order dividing n. Let ip n {P) denote ip n evaluated at 
the point P = (x, y). Then, for any if -rational point P = (x, y) on E. the sequence u n = ip n {P) satisfies (pj and f2}; 
that is, for any P € E(K) we have a corresponding proper elliptic divisibility sequence. If P is not a torsion point, 
then the terms of this sequence are always non-zero. 

Let Mk be the set of valuations of if, each corresponding to some absolute value | • |„, with K v the corresponding 
completion of if. The naive height h(a) of a G if is 



H a ) = ~i log max{l, |a|„}, 



d 

veM K 

and for a finite point P E E(K) we define h(P) = h(x(P)), with h(Po) — for Po the point at infinity. Then the 
global canonical height is the function h : E(K) — ► M given by 

MP) = J Um 4-»h([2»]P). (5) 
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(We note that there are two competing definitions of h(P) in the literature, differing by a factor of 2; in ([5]) and 
throughout we follow [Silverman 88) in taking the smaller, which is consistent with [Elkies 02] . The alternative is 
more natural in the context of the Birch and Swinnerton-Dyer conjecture and, in particular, is the value returned 
by the height functions in computer algebra systems such as Magma [Bosnia, Cannon and Playoust 97| or SAGE 
[Stein et al. 10] .) 

Let D = iV/f|nj(A) and T the set of rational primes which divide D. Then, given an algebraic integral point P on 
E{K) we have (by Theorem 1 of [Everest an d Ward 00] ) 

h{P) = ~ lim \\ogF n , (6) 

where 

F n = E n J] \E n \ p for E n = \N K \ Q (il> n (P))\. 

p£T 

Further, it is usually sufficient in practice to compute © via the gcd of E n and E n+ i, as in formula (21) of 
[Everest and Ward 00] : 

h(P) = 1 Km \ log ( f n ) « fc. = log ( . ) (7) 

dn^n 2 \gcd(E n ,E n+1 ) J dn 2 \gcd(E n , E n+1 ) J 

and, to a few significant figures, good approximations h n are obtained for values of n as small as 128. In the following 
section, we will describe efficient procedures for recovering pairs E n , E n+ \ and hence h n . 

Proposition 1. The proper elliptic divisibility sequences defined by 112,11.3,114 andua,U3,ui correspond to points P 
and P' of the same height. 

We may also perform the reverse procedure, of constructing a point on an elliptic curve from an elliptic divisibility 
sequence. The following unpleasant formulae from [Ward 48] give a point (x, y) on an elliptic curve of form y 2 = 
4x 3 — g%x — 33 from the proper elliptic divisibility sequence defined by the tuple 1*2,1*3,1*4: 

u\ + 2u\ui + 4u 2 ul + ul° 

x = 10 4 2 >V = ~ U2 

121*11*3 



u 2 + 4u^ 5 u 4 - 16w^ 2 it| + Qu\°u\ - 8i*^i*^u 4 + 4u 2 , u 4 1 + 16u|u^ + %u%u%u\ + u\ 

92 



33 = 12 6 ("2 + 61*2 1*4 ~ 241*2^3 + 15^ U% - 60l*2 ^4 

+2Qu\hul + 120t4 4 «3 - mufulu 2 A + 15t*^°?4 - 48^u|t* 4 
+ 12t*^t*^u^ + QAu\u\ + Qu\u\ + 48u2"3^4 + I2U2U3U4 + u\) 



Proposition 2. T/ie proper elliptic divisibility sequences defined by 1*2, U3, 114 and —U2, U3, —1*4 give points P = (x, y) 
and (x, —y) = — P on the same curve. 

In practice, we may often use the much simpler formulae given in |Shipsey 00| to recover the point (0, 0) on a curve 
of form ([3]), where the etj are given by either 

U4 + U2 u 3 + al 
ai = 0, a 3 = M 2 ,a 4 = — , a 2 = 5 — ,a 6 = 0, (8j 

Zti2M3 1*9 
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or 

Ui-uluz + ul u 3 + a 1 a 3 a 4 + al 
ai = l,a 3 = u 2 ,a 4 = , a 2 = s ,a 6 =0. (9) 

LU1U3 u\ 

We may therefore search for points of low height by: generating candidate tuples U2, U3, u 4 that satisfy ([1} and ([2]) 
(for which it suffices to take the ui integral with U2|u 4 ); obtaining an estimate h n ; and, when h n is sufhciently small, 
recovering a corresponding point and curve P, E with h(P) ~ h„ . 

3 Efficient Computation with Elliptic Divisibility Sequences 

We wish to rapidly compute the terms w n ,w n +i of a proper elliptic divisibility sequence. The inductive construction 
of polynomials ip n for n around 2k from polynomials with index around k suggests a double- and- add addition chain 
pproach; in |Shipsey 00 this is made precise, and described in full generality. For our application, a slightly simpler 
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description can be given, since instead of arbitrary chains, we can restrict to a sequence of doublings. 
We define the septuple (uk) to be the terms {uk-3, Uk-2i u k-ti u ki u k+ii u k+2,Uk+ 3 }- Given (u/,.), we can then recover 
(^2fc), since from ([T]) we have 

U 2 l = Ui(ui + 2uf_ 1 -Ul- 2 uf +1 )/u2 (10) 
U21+1 = U l+2 uf - M;_lltf +1 (11) 

and setting I = k — 1, fc, fc + 1 in (fTU|). I = k — 2,k — l,k, k + 1 in (fTl) generates the desired terms from elements of 
(uk) and U2 only. 

For a proper elliptic divisibility sequence we know uq, ... ,114; from ([I]) we have u_ rl = — u n for any n £ N, so 
U-i = — 1; and from (jlip we have M5 = U4U2 — u§. So we may construct (^2) and hence, iteratively, (u n ) for any 
n = 2™, from which we may recover u n ,u n +i to compute h n . 

In |Stange 07] , elliptic divisibility sequences are generalised to elliptic nets, and efficient algorithms are given for 
the double/double-and-add operation on a 'block' centred at k, which contains (v,k) as a subset. Specialising these 
to elliptic divisibility sequences, we note that a speed-up in the function double : (uk) i-> (it 2 fc) can be gained by 
pre-computing the frequently used expressions Ai = u\ and P>i = Ui^\Ui + \ for i = k — 2, . . .k + 2. Assuming u^ 1 
is pre-computcd for a given sequence, we can then perform double as described in Algorithm [TJ which reduces the 
operation count from 14 squarings and 28 multiplications to 5 squarings and 22 multiplications. 



Algorithm 1: double 

Input: [V u V 2 , V 3 ,Vi,V 5 , V 6 , V 7 ] = {u k ),u^ 
Output: (u 2 k) 
for i = 1 , . . . , 5 do 

A\i] =V[i + l] 2 - 

B[i] = V\i]V[i + 2]; 
for i = . . . , 3 do 

V[2i + 1] = B[i + 2]A[i + 1] - B[i + l]A[i + 2); 

if i > then 

I V[2i] = (B[i + 2}A[i] - B[i]A[i + 2])u 2 1 
return V 
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To exhaustively search over a selection of tuples we then proceed as in Algorithm [5] Note that we ensure u 2 \u4; 
and pre-compute u^ 1 once per 112 value, rather than once per sequence (which reduces runtime by about a third in 
practice). Tuples with E n or E n+ i equal to zero necessarily correspond to torsion points, and thus can be discarded. 
Any tuple amongst those returned by Algorithm [5] is then passed to secondary testing: first we attempt to construct 
the corresponding curve, and if this is nonsingular, we check the order of the corresponding point is infinite, then 
confirm its height with both an estimate h n for a larger n, and a direct computation of h(P) in MagmgQ. 



Algorithm 2: search 
Input: Search spaces Si, S2, S3; Height bound H, Iteration bound I 
Output: Defining terms for eds with height estimate < h < H 
Secondary — List(\\); 
for a £ S2 do 
u 2 = a; 
iu2 = a -1 ; 
for /3 £ S 2 do 
"3 = /3; 

for 7 £ S3 do 

U4 = cry; 

V = [-1, 0, 1, U 2 , U 3 , Ui, - U3]; 

n = 2; 

for i = 1, . . . , I do 

V = double(V,iu2); 
n = 2n; 

E n = |JVjf| Q (V 4 )|; 

E n +i = \N m (V 6 )\; 

if E n ^ and E n+ i ^ then 

h = log(E n /gcd(E n , E n+1 ))/dn 2 ; 

if < h< H then 

[ Secondary .append([u2, U3, U4]) 
return Secondary 



4 Results 

We consider quadratic fields K — Q(yD) for D £ { — 7, —6, —5, —3, —2, — 1, 2, 3, 5, 6, 7}. For such fields we have 
Ok — where u) = | + if D = 1 modulo 4, or uj = \f~D for D = 2 or 3. We seek to test the tuples of form 
U2 = a, 7/3 = /3, U4 = C17 for 

a,/3,7 € S := {.t + | x, y g Z, \x\ + \y\ > 0, max{|x|, \y\} < c} , 

for some bound c. By Proposition [5] we may restrict to a € S + , where 

S+ = {x + I x £ {1, . . . , c}, ?/ £ {-c . . . c}} U {yw \ y £ {1, . . . , c}} 

1 We note that some of the recovered points cause difficulties for the height calculation in SAGE, even with precision set as high as 
2048-bit; but in each case Magma confirms the estimates given by JT}. 
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For c = 9 this gives a total of 23, 328, 000 tuples to test for each D; with H = 0.01 and 1 = 6 (so we estimate h by 
^128)> runtimes for Algorithm [2] in SAGE were in the range 12.5-20cpuhour£@ per D. Based on timings for c = 3 
and D = —7 (the choice of D for which Algorithm [5] was slowest), this represents a speedup of around a factor of 
50 over generating P for each tuple and using SAGE's built-in height function to compute h{P), despite being more 
accuratq_|. 

Representatives of the points P on curves E satisfying h(P) < 0.01 found by Algorithm __ with Si = S + , S2 = S3 = S, 
and the tuple /13, hi by which they were identified, are given in Table [TJ In the interests of brevity, if points P, E 
and P',E' were found such that E is isomorphic to E' with P' the image of P under that isomorphism, then we 
list only one pair P, E. Further, for any P,E pair corresponding to h2,h^,hi there is (by Proposition [T]) another 
pair P',E' corresponding to Zi 2 ,/i3,/i4 (not necessarily in S + x S x S) with h(P') = h(P) but E' not necessarily 
isomorphic to E\ again, we list only one example, since P',E' are then easily recovered from h2,hs,hi if desired. 
A full table has been made available online at |Taylor lT] and will hopefully continue to grow: contributions are 
invited. 
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h(p) 


0J 


P,£ 


U2,Uz, Ui 


n 0038563 


V «-* 


(dQ7iu 4- 860 7^231,) 1 302Q^ nn ?/ 2 4- mtii + ?; — r 3 — (.it- 2 — 

(1544879a; + 2675806)a; + 1407381720a; + 2437656645 


1 lu — 1 2a; — 2 


0.0047223. . . 


1 + ±=1 

2 ' 2 


(2a; - 4, 3a; + 6) on y 2 + xy = x 3 - 2lux 2 - (u> + 2)x + 5oj + 2 


w + 1, -(2a; + 2), -(2a; + 10) 


0.0053416. . . 




— / \ 2 ^ 2" 

(1,0) on y + + toy = x — ojx — 5x + oj + 4 


lu + 1, -(2a; + 2), -(8a; + 16) 


0.0054424. . . 


1 I \/=? 

2 "r" 2 


(a; - 2, 5 - 4w) on y 2 + - a>y = x 3 + (3a; - 2)x 2 + (7a; - 
5)x - 12a; - 29 


1 - lu, 6 - 2ui, 8lu - 24 


0.0058010. . . 


1 4. vEI 

2 ' 2 


(2, —(3a; + 1)) on y 2 + a>xy + 2a;y = x 3 — 2x — oj + 3 


lu, 4 - 2oj, 16 - 8oj 


0.0060112. . . 


1 i \/-7 
2~ 2 


(1, — 2) on y 2 + coxy -\- y = x 3 + x 2 — a;x — oj 


1, w — 1, UJ + 1 


0061272 


x/2 

V ^ 


fl 0^ On 7/^ -)- T'?/ — 1 — ^ ~| — I — l,l\n — -A- l,)T^ — T — lil 

\ _L , l_J 1 Ull U | tty y | I _L | Ut/ T tj Ju \ UJ Ju Ju UJ 


^; 4- 2 4a; + 6 20a; + 28 


0.0064724. 


V~2 

V ^ 


(2a;, 2a; + 1) on y z + a;y = x 6 — ujx z + (2a; + 6)x + (a; — 3) 


oj, 2oj — 4, —(4a; + 16) 


0.0069470. . . 




fa;. —1) on v z 4- (oj + l)xty 4- aw = x 3 — a;x 2 — (oj + 3)x + 1 4- a; 


1. a;, a; 


0.0072803. . . 


2 ' 2 


(0, 2 - cj) on j/ 2 + = a; 3 - 2oji 2 + (7w - 6)x + 2 - 3a; 


1 - ui,-(2u> + 2), 24 - 8oj 


0.0073349. . . 


1 i v^I 

2 2 


(-(w + 3), 4a; + 2) on ?/ 2 + xy + (a; - l)y = x 3 + (a; + l)x 2 - 
(7w + + w - 11 


u>,4 — 2lu, 8lu 


0.0073479. . . 


1 , V-T 

2 ~ 2 


(—UJ, Ul— 1) on y 2 + (a; — l)xy— a;y = a: 3 +3a;a; 2 + (a; — 5)x+l— a; 


lu, uj + 2, 5a; + 2 


0.0074870. . . 


1 + v^ 3 

2 ' 2 


(1, 0) on v 2 + (1 - oj)xy + (1 - w)y = a; 3 - 2o;a; 2 + (2a; - l)x 


2 - 2a;, -4, 16 


0.0074943. . . 




(ui, 1) on y 2 + xy + cjy = x 3 + x 2 + 2x + uj + 2 


u),uj — 1, —2 


0.0076951. . . 


2 "l" 2 


(3 - 3a;, 2 - 2aj) on y 2 + xy + (1 - u>)y = x 3 + (3a; - l)x 2 + 
(3a; — l)a; + 3a; — 9 


1 - a;, -2,4 


0.0080799. . . 


1 1 V5 

2 2 


(1, 2a;- 1) on y 2 + (1 - aj);rw + (1 -ui)y = a; 3 +ojx 2 + (a; - 2)x 


2a;, 4oj + 4, 32aj + 16 


0.0087764. . . 




(0, 0) on y 2 + (1 + u>)y = x 3 + (3 + a;)x 2 + (2 + 2a;)a; 


a; + l,2aj + 2,4a; + 4 


0.0087786. . . 




(1, — a;) on y 2 + ojxy + y = x 3 — (a; + l)a; 2 


1 - uj, -2a;, - 


0.0088447. . . 




(l-o), 1) on y 2 + xy+(a; + l)y = x 3 + (uj- 1)x 2 - (2u + 2)x + 1 


a;, — a;, —2 


0.0089008. . . 


I _|_ 


(2, —3) on y 2 + ujxy = x 3 — 2ujx 2 + lux + 1 


2, 2oj - 4, 4a; + 8 


0.0089933. . . 


1 , V5 
2^2 


(uj + 3, 4oj) on y 2 = x 3 + uix 2 - (21a; + 16)a; + 61a; + 41 


w, 3oj + 2, 13a; + 8 


0.0089933. . . 


2+^ 


(2a; + 3,3aj + 4) on y 2 + 2uy = x 3 -ujx 2 - (6a; + ll)x + 22a; + 21 


ui + 1, 3a; + 2, 21a; + 13 


0.0090543. . . 




(2ui - 4, 4a; + 4) on y 2 = x 3 + (1 - 2a;)x 2 - 12a; + 36a; - 12 


a; + 1, -(3a; + 3), -(9a; + 9) 


0.0091282. . . 


1 , VT, 

2 "r" 2 


(5, 2 - 2ui) on y 2 + (1 - aj)a-y + (ui- l)y = x 3 - x 2 - (34a; + 
45)ai + 158a; + 149 


1 -w, -2a;,- (4a; + 2) 


0.0091781. . . 




(0, 0) on y 2 + ujy = x 3 + uix 2 


a;, 3a), — 9a; 


0.0093444. . . 




(1,-1) on y 2 + (uj + l)xy + y = x 3 - x 2 - (3a; + 4)a; + 2a; + 3 


a;, — 2oj, 8a; + 8 


0.0097150. . . 




(uj, uj) on y' 2 + xy + toy = x 3 — lux 2 + (a; — 2)a; + 2a; + 4 


2,4oj, -16 


0.0097217. . . 


5 + ^ 


(uj - 1, 4oj) on y 2 = x 3 + x 2 - (15a; + 12)x + 27a; + 20 


a;, — (a; ~\~ 1), 3a; ~\~ 2 


0.0097259. . . 


i , Vs 

2^2 


(2a;, 4oj) on y 2 = x 3 + (1 - a;)x- 2 - (20a; + 16)x + 76a; + 48 


a;,2a; + 1, -(13a; + 8) 


0.0097259. . . 


1 , V"5 

2 ' 2 


(-ui, Aui + 4) on y 2 = x 3 + (1 - a;)a; 2 - (11a; + 13)x + 27a; + 22 


uj + 1, -(5a; + 3), -(21a; + 13) 



Table 1: Some points P on curves E over quadratic fields Q(a/D) with height h(P) at most 0.01. 
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